Allow API requests not associated with any particular user